CVE-2019-20570

An issue was discovered on Samsung mobile devices with P9.0, O8.0, and N7.1 software. Attackers can bypass Factory Reset Protection FRP via Smart Switch. The Samsung ID is SVE-2019-15138 September 2019...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0, O8.0, and N7.1 software. Attackers can bypass Factory Reset Protection FRP via Smart Switch. The Samsung ID is SVE-2019-15138 September 2019...

CVE-2019-20570

An issue was discovered on Samsung mobile devices with P9.0, O8.0, and N7.1 software. Attackers can bypass Factory Reset Protection FRP via Smart Switch. The Samsung ID is SVE-2019-15138 September 2019...

Security Bulletin: IBM Integration Bus affected by a JDBC XA switch load files Vulnerability(CVE-2017-1418)

Summary IBM Integration Bus ships with JDBC XA switch load files for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. Vulnerability Details CVEID: CVE-2017-1418 DESCRIPTION: IBM Integration Bus has insecure permissions on certain files. A local...

The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a intruder to gain unauthorized access and intercept web sessions.

The vulnerability of Belden Hirschmann’s network switch web interfaces for models series RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS is related to improper session management. Exploiting this vulnerability can allow an attacker to gain unauthorized access and intercept web sessions...

The vulnerability of the web interface of Belden Hirschmann’s network switches of the RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS series allows a hacker to disclose protected information.

The vulnerability of the web interface of Belden Hirschmann’s network switches series RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS is related to errors in processing GET requests. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a GET...

The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to execute a type of attack known as “man-in-the-middle” attack.

The vulnerability of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS lies in the transmission of confidential information in the form of plain text. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attac...

Arista Networks EOS kernel DoS (SA0040)

The version of Arista Networks EOS running on the remote device is affected by a denial of service vulnerability in the Linux kernel. An unauthenticated, remote attacker can exploit this, by sending malformed packets with rarely used packet options to a vulnerable switch. Note that Nessus has not...

Moxa AWK-3131A Trust Management Issues Vulnerability

Moxa AWK-3131A is a wireless switch from Moxa. A trust management issue vulnerability exists in multiple iw utilities in the Moxa AWK-3131A using firmware version 1.13. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An attacker c...

CVE-2020-3168

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module VSM to become inaccessible to users through the CLI. The vulnerability is due to...

CVE-2020-3168 Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module VSM to become inaccessible to users through the CLI. The vulnerability is due to...

Moxa EDS-G516E and EDS-510E series plaintext transfer vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A plaintext transfer vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by attackers to obtain sensitive information...

D-Link DGS-1250 Header Injection

D-Link DGS-1250 header injection vulnerability ============================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/d-link-dgs-1250-header-injection.txt Overview -------- D-Link DGS-1250 switch is susceptible to a header injection...

USN-4285-1 linux-aws-5.0, linux-azure, linux-gcp, linux-gke-5.0, linux-oracle-5.0 vulnerabilities

It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacker could use this to expose sensitive information. CVE-2019-14615 It was discovered that the HSA Linux kernel driver for AMD GPU devices did not...

MGASA-2020-0089 Updated kernel-linus packages fix security vulnerabilities

This update provides upstream 5.4.20, adding support for new hardware and features, and resolves at least the following security issues: In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This...

Huawei P10 Plus Digital Balance Bypass Vulnerability

Huawei P10 Plus is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in Huawei smart phones P10 Plus. During a reset of the phone, an attacker could use the vulnerability to bypass the boot wizard and turn on a business switch, thereby bypassing the Healthy Use of...

CVE-2020-0027

In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthrough. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0027

In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthrough. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-5322

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007 and 16.10. before 16.10.0003...

Information disclosure

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007 and 16.10. before 16.10.0003...